The -sS flag runs a SYN scan, which sends bare connection attempts and reads the replies without completing handshakes, making it fast and hard to log. The -p list restricts the probe to SSH, HTTP, and HTTPS. Scan results show which services a LAN device actually exposes, but only scan networks you own or have permission to test.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.